Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-23650

BuildKit possible panic when incorrect parameters sent from frontend

Description

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

moby buildkit

  • < 0.12.5affected

References